squid -- possible cache-poisoning via malformed HTTP responsesentered 2005-01-24
no CVE referenced
CVE details
CVE-2005-0174
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache or conduct certain attacks via headers that do not follow the HTTP specification, including (1) multiple Content-Length headers, (2) carriage return (CR) characters that are not part of a CRLF pair, and (3) header names containing whitespace characters.
- Score
- 5.0 medium
- Published
- 2005-02-07
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.